CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows...
CVE-2026-111359
CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefron
#advisory
共收录 22969 条相关情报。
← 返回所有主题crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated...
CVE-2026-111354
crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other me
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non...
CVE-2026-111365
cool-admin-midway through 8.0.0 contains an authorization bypass vulnerability that allows non-superadmin admins to read
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in...
CVE-2026-111352
ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restrict
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer...
CVE-2026-111350
Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows au
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any...
CVE-2026-111345
Trudesk through 1.2.11 contains an authorization bypass vulnerability that allows any authenticated user to read private
metasfresh through 5.175 contains a missing record-level authorization vulnerability in...
CVE-2026-111351
metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment...
CVE-2026-111346
ZenTao PMS through 22.6 contains an authorization bypass vulnerability in action::editComment that allows authenticated
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public...
CVE-2026-111347
go-ldap-admin through 0.6.2 embeds a hard-coded RSA private key, published in the public repository, that protects encry
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale...
CVE-2026-111348
Likeshop through 3.5.1 contains an insecure direct object reference vulnerability in AfterSale.php and AfterSaleLogic.ph
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows...
CVE-2026-111344
APITable through 1.14.0-beta contains an authorization bypass vulnerability that allows authenticated users to read node
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer...
CVE-2026-111349
Craftplan through 0.7.5 contains a missing authorization vulnerability in the CRM Customer resource that allows unauthen
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router...
CVE-2026-111331
Dokploy through 0.30.8 contains a cross-organization authorization bypass in the port tRPC router that allows authentica
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows...
CVE-2026-111332
OxiCloud 0.9.1 through 0.9.3 contains an incorrect authorization vulnerability that allows anonymous visitors to keep sh
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in...
CVE-2026-111323
RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraf
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow...
CVE-2026-111329
JuggleIM im-server through 1.8.16 ships default administrator credentials admin/123456 that allow unauthenticated remote
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows...
CVE-2026-111321
TaskingAI through 0.3.0 contains a server-side request forgery vulnerability that allows authenticated attackers to make
Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows...
CVE-2026-111322
Archon 0.2.13 through 0.11.1 contains a missing authentication vulnerability that allows unauthenticated attackers to ac
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows...
CVE-2026-111324
rustdesk-api through 2.7 contains an authorization bypass vulnerability that allows unauthenticated attackers to overwri
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that...
CVE-2026-111343
pig through 4.1.1 contains a missing authorization vulnerability in SysUserController.user that allows any authenticated